--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T14:00:10Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-07T14:00:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T14:00:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-07T14:00:10Z" name: system:openshift:openshift-monitoring-86t9j resourceVersion: "8132" uid: 0989f3c9-635b-480b-9332-48cc529dcef1 spec: extra: authentication.kubernetes.io/credential-id: - JTI=826f0ad8-2980-4e63-bc21-1fe6788f792d authentication.kubernetes.io/node-name: - ip-10-0-140-192.ec2.internal authentication.kubernetes.io/node-uid: - 1656c317-5667-4d17-a455-c25a77a16edf authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-fr2kp authentication.kubernetes.io/pod-uid: - 8b1219f1-d3d3-4533-8b55-546c7c1a4bc6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: b52b471b-28ed-4b63-a12e-f5935861697d usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T14:00:10Z" lastUpdateTime: "2026-07-07T14:00:10Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-86t9j" reason: AutoApproved status: "True" type: Approved